nerdexam
Microsoft

PL-400 · Question #31

You are creating an integration that uses an Azure function to create records in the Common Data Service when leads are submitted from your company website. You create and configure a Common Data…

The correct answer is A. Create an application registration in Azure Active Directory. D. Create a new security role with the minimum required permissions and assign to the application E. Grant the application delegated permissions to the Dynamics CRM API in Azure Active Directory. A: Registering an application with Azure Active Directory, enables a user with Power Apps user account to connect to their Microsoft Dataverse environment from external client applications using OAuth authentication. D: Use minimum permissions. E: In the application…

Submitted by haruto_sh· Apr 18, 2026

Question

You are creating an integration that uses an Azure function to create records in the Common Data Service when leads are submitted from your company website. You create and configure a Common Data Service application user. You do not have administrator access to the Common Data Service environment you are using for access to Azure Active Directory. Company policy dictates that service accounts must be used for integrations, and integrations must not be granted privileges beyond what is needed. You need to recommend actions that an administrator should perform to configure access for the Azure Function. Which three actions should you perform? Each correct selection presents part of the solution. NOTE: Each correct selection is worth one point.

Exhibit

PL-400 question #31 exhibit

Options

  • ACreate an application registration in Azure Active Directory.
  • BAssign the system administrator security role to the application user.
  • CAssign the Power Platform administrator role to the application user in Azure Active Directory.
  • DCreate a new security role with the minimum required permissions and assign to the application
  • EGrant the application delegated permissions to the Dynamics CRM API in Azure Active Directory.
  • FDeploy Azure B2B guest permissions to the application user.

How the community answered

(44 responses)
  • A
    77% (34)
  • B
    14% (6)
  • C
    2% (1)
  • F
    7% (3)

Explanation

A: Registering an application with Azure Active Directory, enables a user with Power Apps user account to connect to their Microsoft Dataverse environment from external client applications using OAuth authentication. D: Use minimum permissions. E: In the application registration process you delegate permissions to the Dynamics CRM API in Azure Active Directory. Not B: The system administrator security role would give the user too much privileges. Not C: The Power Platform administrator role would give the user too much privileges. https://docs.microsoft.com/en-us/powerapps/developer/common-data-service/walkthrough- register-app-azure-active-directory

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PL-400 Practice